Cybersecurity firm McAfee LLC today announced new products and features at its MPOWER Digital virtual conference that are designed to provide enhanced security services.

Leading the two main announcements is the new MVISION Cloud Native Application Protection Platform. It’s designed to deliver comprehensive data protection, threat protection, governance and compliance for cloud-native application lifecycles.

Described as the industry’s first truly integrated architecture to secure the cloud native application ecosystem, MVISION CNAPP covers the full cloud-native application lifecycle including container and OS-based workloads. The service offers Cloud Security Posture Management for public cloud infrastructure and Cloud Workload Protection to protect hosts and workloads including virtual machines, containers and serverless functions.

MVISION CNAPP provides five key capabilities. A deep discovery capability is designed to discover all cloud resources and prioritize them based on risk, while a feature described as “shift left” protects against configuration drift and provides vulnerability assessment across virtual machines, containers and serverless environments.

In very much a sign of the times as the method becomes increasingly popular across cybersecurity products and services, MVISION CNAPP provides the ability to build policy based on zero trust with behavioral observation to eliminate false positives and achieve scale with “known good behavior” enforcement.

MVISION CNAPP provides support for the MITRE ATT&CK Framework, allowing SecOps to tap into the globally accessible knowledge base of adversary tactics and techniques. Finally, the new service provides compliance support to automate security controls for continuous compliance and governance to ensure business continuity.

The second announcement covers new features and functionality for McAfee MVISION Unified Cloud Edge that are said to deliver a unique approach to protection against ransomware and phishing threats.

The new features include the integration of “remote browser isolation” technology with its real-time protection stack, along with unified data loss prevention and incident management across devices, networks, web and the cloud.

Of the three, the RBI technology is perhaps the most interesting. The RBI in MVISION UCE is designed to provide advanced protection for users against web-based threats, such as ransomware and credential phishing attacks, while unified data classification and incident management extending protection to wherever data may reside – including rogue “shadow IT” cloud services or websites.

The new features are pitched as providing an even more comprehensive converged approach to security within the Secure Access Service Edge framework, reducing costs and complexity associated with enterprise security while enabling maximum agility from the cloud.

Both the new features in MVISION UCE along with the new MVISION CNAPP are both framed as providing assistance to companies during COVID-19.

“The uncertainty of 2020 has forced enterprises to accelerate their cloud transformation projects to empower their remote workforces, resulting in a 50% increase in enterprise cloud use since the start of the year,” McAfee said in a statement. Those challenges are noted as including threats targeting cloud services increasing by 630% along with increased cloud usage meaning that data is flowing beyond the reach of traditional network data protection, posing a significant risk of data falling into the wrong hands via untrusted cloud services or home devices.

MVISION CNAPP is available in beta now with general availability planned for March 2021. The new features in MVISION UCE will be available in November with the exception of RBI, which will be initially available in beta in the coming months.

Image: McAfee